Privacy Policy

1. Controller and contact

The operator identified in the KoalaStuff legal notice ↗ is responsible for this service. Use the contact details published there for privacy questions or requests.

2. Data processed by the service

No account, name, email address, tracking cookie, advertising script, or analytics service is required.

• Server requests: The web server and infrastructure providers necessarily process connection data such as IP address, request time, path, user agent, and response status to deliver and protect the service. KoalaGitHub does not write IP addresses into its SQLite vote database. Infrastructure security or access logs may be retained separately.
• GitHub usernames: A username entered in the search field is placed in the page URL and compatible preview URLs. It is not written to the SQLite database. Infrastructure providers and the selected preview provider may receive it as part of the requested URL.
• Votes: A random UUID v4 device identifier and the selected visualizer ID are transmitted to the API and stored in SQLite. They are not intentionally connected to a GitHub account, name, or email address.
• Abuse protection: The application temporarily counts vote and vote-deletion requests per combination of IP address and device identifier in memory. These rate-limit counters reset after one hour and are not persisted. Resetting a counter does not expire, remove, or duplicate a vote: a vote remains associated with the same persistent browser identifier until it is toggled off or deleted.

3. Purpose, legal basis, and retention

Functional storage is used to provide vote toggling, aggregate vote totals, service delivery, and abuse prevention. The intended legal basis is legitimate interests under Article 6(1)(f) GDPR: operating a useful and secure community directory without user accounts or cross-site tracking.

Vote records remain until you remove the vote, use the deletion control below, the visualizer is removed, or the service is discontinued. Only the transient in-memory request counters reset after one hour; this has no effect on stored votes. Hosting logs follow the infrastructure provider's operational retention rules.

4. Browser storage

• koala-theme stores the selected light, dark, or system theme.
• koala_device_id stores the pseudonymous identifier used to load and toggle your vote state. It has no automatic expiry and remains unchanged until you delete it or clear this site's browser data.

Clearing site data removes these browser entries. It does not by itself delete an existing vote record from the server because the identifier needed to locate that record would be lost. Use the control below first.

5. Third-party previews and links

Visualizer previews are requested directly by your browser from their respective providers, including GitHub-hosted content and independent services. Those providers receive normal HTTP request data, including your IP address, browser information, request time, and the GitHub username embedded in the preview URL. KoalaGitHub uses referrerpolicy="no-referrer" for preview images and external links where practical, but each provider remains responsible for its own processing.

Fonts, application scripts, and styles are served locally; no analytics or advertising network is included.

6. Recipients, transfers, and your rights

Data may be processed by the service operator, its hosting and network providers, and the third-party preview provider you choose to load. Some preview providers may process data outside the EU/EEA under their own terms.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or data portability. You may also lodge a complaint with a competent data protection authority. Because votes are pseudonymous, include the device identifier when a request concerns a vote record; otherwise the record cannot be reliably attributed to you.

KoalaGitHub does not use automated decision-making or profiling.